need to add domain-based "security" via asserts here